--- title: "Get" method: GET path: "/api/v1/access_review/{id}" tags: ["Access Review"] --- # Get `GET /api/v1/access_review/{id}` Get retrieves a single access review campaign by ID. ## Path parameters - `id` string, required — The ID of the access review campaign to retrieve. ## Response `200` Successful response - C1ApiAccessreviewV1AccessReviewServiceGetResponse — The AccessReviewServiceGetResponse message. - `accessReview` C1ApiAccessreviewV1AccessReviewView — The AccessReviewView message. - `accessReview` C1ApiAccessreviewV1AccessReview — An access review campaign (also called a certification campaign) that verifies whether users still need their access entitlements. This message contains a oneof named setup_metadata. Only a single field of the following list may be set at a time: - singleApp - multiApp - bindings - `accessReviewTemplateId` string — The ID of the template if the campaign was created from one - `accuracyIssueAction` 'ACCURACY_ISSUE_ACTION_UNSPECIFIED' | 'ACCURACY_ISSUE_ACTION_CONTINUE' | 'ACCURACY_ISSUE_ACTION_WAIT' — The accuracyIssueAction field. - `autoCloseCampaign` boolean — Auto-close configuration completion_date is used as the scheduled close date - `autoCloseDecision` 'CLOSE_DECISION_UNSPECIFIED' | 'CLOSE_DECISION_REVOKED' | 'CLOSE_DECISION_SKIP' | 'CLOSE_DECISION_NO_ACTION' — The autoCloseDecision field. - `autoGenerateReport` boolean — The autoGenerateReport field. - `autoResolve` boolean — When true, selections are automatically resolved if the entitlement grant no longer exists. - `autoStartCampaign` boolean — Auto-start configuration - `bindings` C1ApiAccessreviewV1BindingObjectSetup — The BindingObjectSetup message. - `campaignHealth` C1ApiAccessreviewV1CampaignHealthSnapshot — Campaign health snapshot. Read-only; updated by backend maintenance processors. - `checkedAt` string, date-time, nullable - `phantomLockedCount` integer — Number of pending actions locked by terminal (dead) submissions. - `campaignInsights` C1ApiAccessreviewV1CampaignInsights — AI-generated campaign insights (markdown). Read-only; set by backend when campaign is closed. - `markdown` string — The markdown field. - `closedAt` string, date-time, nullable - `columnConfig` C1ApiAccessreviewV1AccessReviewColumnConfig — Configuration for which columns are visible in the reviewer task list. - `columns` string[], nullable — Deprecated: use `ordered_columns`, which can also include app user attribute columns. - `orderedColumns` C1ApiAccessreviewV1AccessReviewTaskColumnRef[], nullable — Ordered columns visible to reviewers, built-ins and attributes interleaved. Falls back to `columns`, then to the default set for the campaign's default_view. - `appUserAttributeKey` string, nullable — The appUserAttributeKey field. This field is part of the `column` oneof. See the documentation for `c1.api.accessreview.v1.AccessReviewTaskColumnRef` for more details. - `builtin` 'ACCESS_REVIEW_TASK_COLUMN_UNSPECIFIED' | 'ACCESS_REVIEW_TASK_COLUMN_VIEW_LINK' | 'ACCESS_REVIEW_TASK_COLUMN_CURRENT_STATE' | 'ACCESS_REVIEW_TASK_COLUMN_ACCOUNT' | 'ACCESS_REVIEW_TASK_COLUMN_ACCOUNT_OWNER' | 'ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT' | 'ACCESS_REVIEW_TASK_COLUMN_ENTITLEMENT_DESCRIPTION' | 'ACCESS_REVIEW_TASK_COLUMN_RESOURCE' | 'ACCESS_REVIEW_TASK_COLUMN_RESOURCE_TYPE' | 'ACCESS_REVIEW_TASK_COLUMN_INSIGHTS' | 'ACCESS_REVIEW_TASK_COLUMN_RECOMMENDATION' | 'ACCESS_REVIEW_TASK_COLUMN_ASSIGNED_TO' | 'ACCESS_REVIEW_TASK_COLUMN_STATUS' | 'ACCESS_REVIEW_TASK_COLUMN_APP' | 'ACCESS_REVIEW_TASK_COLUMN_DUE' | 'ACCESS_REVIEW_TASK_COLUMN_PROJECT' | 'ACCESS_REVIEW_TASK_COLUMN_CREATED_ON' | 'ACCESS_REVIEW_TASK_COLUMN_TASK_AGE' | 'ACCESS_REVIEW_TASK_COLUMN_RESOLVED_ON' | 'ACCESS_REVIEW_TASK_COLUMN_ENROLLMENT_STATUS' | 'ACCESS_REVIEW_TASK_COLUMN_INHERITED_FROM' | 'ACCESS_REVIEW_TASK_COLUMN_DEPARTMENT' | 'ACCESS_REVIEW_TASK_COLUMN_JOB_TITLE' | 'ACCESS_REVIEW_TASK_COLUMN_CREATED_BY' | 'ACCESS_REVIEW_TASK_COLUMN_LAST_LOGIN' | 'ACCESS_REVIEW_TASK_COLUMN_RESOURCE_PARENT' | 'ACCESS_REVIEW_TASK_COLUMN_RESOURCE_CHILDREN' | 'ACCESS_REVIEW_TASK_COLUMN_APP_USER_USERNAME' | 'ACCESS_REVIEW_TASK_COLUMN_ACCESS_HOLDER_TYPE' | 'ACCESS_REVIEW_TASK_COLUMN_RISK_LEVEL' | 'ACCESS_REVIEW_TASK_COLUMN_COMPLIANCE_FRAMEWORK', nullable — The builtin field. This field is part of the `column` oneof. See the documentation for `c1.api.accessreview.v1.AccessReviewTaskColumnRef` for more details. - `completionDate` string, date-time, nullable - `connectorSourcesFrozenAt` string, date-time, nullable - `createdAt` string, date-time, nullable - `createdById` string — The ID of the user who created this campaign. - `defaultView` 'ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_APP' | 'ACCESS_REVIEW_VIEW_TYPE_BY_USER' | 'ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE' — the default view that reviewers will see when they complete their access reviews - `description` string — An optional description providing context about this campaign. - `displayName` string — The human-readable name of this campaign. - `errorState` 'ACCESS_REVIEW_ERROR_STATE_UNSPECIFIED' | 'ACCESS_REVIEW_ERROR_STATE_SELECTION_QUOTA_EXCEED_ERROR' — Error state set when a prepare action fails with a recoverable condition. Cleared when the campaign scope is changed. - `exclusionScope` C1ApiAccessreviewV1AccessReviewExclusionScope — The AccessReviewExclusionScope message. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `appUserTypes` string[], nullable — The appUserTypes field. - `exemptCertifiedAccessConflicts` boolean — this setting is used for access conflict type scope - `expectedTicketCount` integer — The estimated number of review tasks that will be generated when the campaign starts. - `hasAccuracySupport` boolean — Whether the connectors in this campaign support accuracy checking. - `id` string — The unique identifier of this access review campaign. - `inclusionScope` C1ApiAccessreviewV1AccessReviewInclusionScope — The AccessReviewInclusionScope message. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `appUserTypes` string[], nullable — The appUserTypes field. - `managerIds` string[], nullable — The managerIds field. - `multiUserProfileAttributes` object — The multiUserProfileAttributes field. - `noAccountOwners` boolean — The noAccountOwners field. - `userIds` string[], nullable — The userIds field. - `userStatuses` string[], nullable — The userStatuses field. - `multiApp` C1ApiAccessreviewV1MultiAppSetup — The MultiAppSetup message. - `appEntitlementDetails` object — The appEntitlementDetails field. - `appEntitlements` object — The appEntitlements field. - `notificationConfig` C1ApiAccessreviewV1NotificationConfig — Controls which email notifications are sent during the access review lifecycle. - `sendClose` boolean — Whether to send a notification when the campaign is closed. - `sendKickoff` boolean — Whether to send a notification when the campaign is started. - `sendReminders` boolean — Whether to send periodic reminder emails to reviewers with outstanding tasks. - `policyId` string — The ID of the review policy that governs how review tasks are assigned and resolved. - `reviewInstructions` string — Optional instructions displayed to reviewers when completing their review tasks. - `reviewerAttributeConfig` C1ApiAccessreviewV1ReviewerAttributeConfig — Allowlist of AppUser.profile keys visible to reviewers, scoped per app. Empty = reviewers see no profile attributes in the AppUser tooltip. - `bindings` C1ApiAccessreviewV1ReviewerAttributeBinding[], nullable — The bindings field. - `appId` string — The appId field. - `attributeKey` string — The attributeKey field. - `scheduledStartDate` string, date-time, nullable - `scope` C1ApiAccessreviewV1AccessReviewScope — The AccessReviewScope message. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `appUserTypes` string[], nullable — The appUserTypes field. - `scopeType` 'ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_USERS' — this sets the scope type for the access review - `scopeV2` C1ApiAccessreviewV1AccessReviewScopeV2 — The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection This message contains a oneof named excluded_apps_and_resources_scope. Only a single field of the following list may be set at a time: - excludedSpecificResources - excludedResourceTypeSelections - `accountCelExpression` C1ApiAccessreviewV1CelExpressionScope — The CelExpressionScope message. - `expression` string — The expression field. - `accountCriteria` C1ApiAccessreviewV1AccountCriteriaScope — The AccountCriteriaScope message. - `accountDomain` 'APP_USER_DOMAIN_UNSPECIFIED' | 'APP_USER_DOMAIN_EXTERNAL' | 'APP_USER_DOMAIN_TRUSTED' — The accountDomain field. - `accountTypes` string[], nullable — The accountTypes field. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `noAccountOwner` boolean — The noAccountOwner field. - `allAccessConflicts` C1ApiAccessreviewV1AllAccessConflictsScope — The AllAccessConflictsScope message. - `allAccounts` C1ApiAccessreviewV1AllAccountsScope — The AllAccountsScope message. - `allGrants` C1ApiAccessreviewV1AllGrantsScope — The AllGrantsScope message. - `allUsers` C1ApiAccessreviewV1AllUsersScope — The AllUsersScope message. - `appAccess` C1ApiAccessreviewV1ApplicationAccessScope — The ApplicationAccessScope message. - `appSelectionCriteria` C1ApiAccessreviewV1AppSelectionCriteriaScope — The AppSelectionCriteriaScope message. - `complianceFrameworkAttributeValueIds` string[], nullable — The complianceFrameworkAttributeValueIds field. - `riskLevelAttributeValueIds` string[], nullable — The riskLevelAttributeValueIds field. - `celExpression` C1ApiAccessreviewV1CelExpressionScope — The CelExpressionScope message. - `expression` string — The expression field. - `excludedResourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope — The ResourceTypeSelectionScope message. - `excludedSpecificResources` C1ApiAccessreviewV1SpecificResourcesScope — The SpecificResourcesScope message. - `grantsByCriteria` C1ApiAccessreviewV1GrantsByCriteriaScope — The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween - `accessProfileFilter` C1ApiAccessreviewV1GrantAccessProfileFilter — The GrantAccessProfileFilter message. - `excludedAccessProfileIds` string[], nullable — Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs - `filterType` 'ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC' — The filterType field. - `includedAccessProfileIds` string[], nullable — Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs - `daysSinceAdded` string, duration, nullable - `daysSinceLastUsed` string, duration, nullable - `daysSinceReviewed` string, duration, nullable - `grantsAddedBetween` C1ApiAccessreviewV1GrantsAddedBetween — The GrantsAddedBetween message. - `endDate` string, date-time, nullable - `startDate` string, date-time, nullable - `sourceFilter` 'GRANT_SOURCE_FILTER_UNSPECIFIED' | 'GRANT_SOURCE_FILTER_DIRECT' | 'GRANT_SOURCE_FILTER_INHERITED' — The sourceFilter field. - `typeFilter` 'GRANT_FILTER_TYPE_UNSPECIFIED' | 'GRANT_FILTER_TYPE_PERMANENT' | 'GRANT_FILTER_TYPE_TEMPORARY' — The typeFilter field. - `principalTypeFilter` 'PRINCIPAL_TYPE_FILTER_UNSPECIFIED' | 'PRINCIPAL_TYPE_FILTER_USERS' | 'PRINCIPAL_TYPE_FILTER_RESOURCES' | 'PRINCIPAL_TYPE_FILTER_USERS_AND_RESOURCES' — Filters principals included in the scope. Unspecified is treated as users. - `resourceSelection` C1ApiAccessreviewV1ResourceSelectionScope — The ResourceSelectionScope message. - `resourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope — The ResourceTypeSelectionScope message. - `scopeRoleSelection` C1ApiAccessreviewV1ScopeRoleSelectionScope — Empty marker for scope+role pair scoping on IaaS-type apps. Actual selections stored in AccessReviewScopeRoleSelection rows. May coexist with ResourceSelectionScope on the same campaign; prepare unions both. - `selectedUsers` C1ApiAccessreviewV1SelectedUsersScope — The SelectedUsersScope message. - `userIds` string[], nullable — The userIds field. - `specificAccessConflicts` C1ApiAccessreviewV1SpecificAccessConflictsScope — The SpecificAccessConflictsScope message. - `specificResources` C1ApiAccessreviewV1SpecificResourcesScope — The SpecificResourcesScope message. - `userCriteria` C1ApiAccessreviewV1UserCriteriaScope — The UserCriteriaScope message. - `groupAppEntitlementsRef` C1ApiAppV1AppEntitlementRef[], nullable — The groupAppEntitlementsRef field. - `appId` string — The appId field. - `id` string — The id field. - `managerUserIds` string[], nullable — The managerUserIds field. - `multiUserProfileAttributes` object — The multiUserProfileAttributes field. - `userStatus` string[], nullable — The userStatus field. - `scopingVersion` string, int64 — Internal version counter incremented when the campaign scope changes. - `signatureConfig` C1ApiAccessreviewV1ReviewSignatureConfig — Signature configuration for access review submissions - `meaningOfSignature` string — The meaningOfSignature field. - `requireSignature` boolean — The requireSignature field. - `stepUpProviderId` string — The stepUpProviderId field. - `tspUrl` string — The tspUrl field. - `singleApp` C1ApiAccessreviewV1SingleAppSetup — The SingleAppSetup message. - `appId` string — The appId field. - `startedAt` string, date-time, nullable - `state` 'ACCESS_REVIEW_STATE_UNSPECIFIED' | 'ACCESS_REVIEW_STATE_OPEN' | 'ACCESS_REVIEW_STATE_CLOSED' | 'ACCESS_REVIEW_STATE_PENDING' | 'ACCESS_REVIEW_STATE_REVIEW' | 'ACCESS_REVIEW_STATE_PREPARING' | 'ACCESS_REVIEW_STATE_STARTING' | 'ACCESS_REVIEW_STATE_DRAFT' | 'ACCESS_REVIEW_STATE_DELETING' | 'ACCESS_REVIEW_STATE_DELETED' | 'ACCESS_REVIEW_STATE_RESETTING_POLICIES' | 'ACCESS_REVIEW_STATE_COPYING_SETUP_ENTITLEMENTS' | 'ACCESS_REVIEW_STATE_COPYING_RESOURCE_TYPE_SELECTIONS' — The current lifecycle state of the campaign (e.g., draft, open, closed). - `updatedAt` string, date-time, nullable - `usePolicyOverride` boolean — Determines the policy applied to the campaign. Default is false, using the campaign policy. If true, the order of precedence is entitlement → app → campaign policy. - `createdByUserPath` string — The createdByUserPath field. - `objectPermissions` C1ApiIamV1ActorObjectPermissions — Legacy: do not use for new objects. Retained only for the existing AppResource / AppEntitlement / access-review consumers, which will migrate to c1.api.authorization.v1.ActorObjectPermissions in IGA-2331. New object views should reference c1.api.authorization.v1.ActorObjectPermissions instead. - `delete` boolean — The delete field. - `edit` boolean — The edit field. - `extra` object — The extra field. - `read` boolean — The read field. - `policyPath` string — The policyPath field. - `expanded` object[], nullable — Related objects requested via the expand mask. - `@type` string — The type of the serialized message. --- [API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)